Protection mechanism failure vulnerability in KONICA MINOLTA bizhub series (bizhub C750i…
Key facts
- Attack vector
- Physical
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
Protection mechanism failure vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G00-35 and earlier, bizhub C650i/C550i/C450i G00-B6 and earlier, bizhub C360i/C300i/C250i G00-B6 and earlier, bizhub 750i/650i/550i/450i G00-37 and earlier, bizhub 360i/300i G00-33 and earlier, bizhub C287i/C257i/C227i G00-19 and earlier, bizhub 306i/266i/246i/226i G00-B6 and earlier, bizhub C759/C659 GC7-X8 and earlier, bizhub C658/C558/C458 GC7-X8 and earlier, bizhub 958/808/758 GC7-X8 and earlier, bizhub 658e/558e/458e GC7-X8 and earlier, bizhub C287/C227 GC7-X8 and earlier, bizhub 287/227 GC7-X8 and earlier, bizhub 368e/308e GC7-X8 and earlier, bizhub C368/C308/C258 GC9-X4 and earlier, bizhub 558/458/368/308 GC9-X4 and earlier, bizhub C754e/C654e GDQ-M0 and earlier, bizhub 754e/654e GDQ-M0 and earlier, bizhub C554e/C454e GDQ-M1 and earlier, bizhub C364e/C284e/C224e GDQ-M1 and earlier, bizhub 554e/454e/364e/284e/224e GDQ-M1 and earlier, bizhub C754/C654 C554/C454 GR1-M0 and earlier, bizhub C364/C284/C224 GR1-M0 and earlier, bizhub 754/654 GR1-M0 and earlier, bizhub C3851FS/C3851/C3351 GC9-X4 and earlier, bizhub 4752/4052 GC9-X4 and earlier) allows a physical attacker to bypass the firmware integrity verification and to install malicious firmware.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Konica Minolta, Inc. | bizhub series | all versions | — | No fix listed | CNA |
- bizhub series VendorKonica Minolta, Inc. Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 104
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:konicaminolta:bizhub_c759_firmware:*:*:*:*:*:*:*:* | before gca-y1 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c759:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c659_firmware:*:*:*:*:*:*:*:* | before gca-y1 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c659:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c658_firmware:*:*:*:*:*:*:*:* | before gca-y1 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c658:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c558_firmware:*:*:*:*:*:*:*:* | before gca-y1 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c558:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c458_firmware:*:*:*:*:*:*:*:* | before gca-y1 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c458:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
- cpe:2.3:o:konicaminolta:bizhub_c759_firmware:*:*:*:*:*:*:*:* Versions before gca-y1 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c759:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c659_firmware:*:*:*:*:*:*:*:* Versions before gca-y1 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c659:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c658_firmware:*:*:*:*:*:*:*:* Versions before gca-y1 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c658:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c558_firmware:*:*:*:*:*:*:*:* Versions before gca-y1 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c558:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c458_firmware:*:*:*:*:*:*:*:* Versions before gca-y1 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c458:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
Show 94 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:konicaminolta:bizhub_958_firmware:*:*:*:*:*:*:*:* | before gca-y1 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_958:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_808_firmware:*:*:*:*:*:*:*:* | before gca-y1 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_808:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_758_firmware:*:*:*:*:*:*:*:* | before gca-y1 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_758:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_658e_firmware:*:*:*:*:*:*:*:* | before gca-y1 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_658e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_558e_firmware:*:*:*:*:*:*:*:* | before gca-y1 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_558e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_458e_firmware:*:*:*:*:*:*:*:* | before gca-y1 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_458e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c287_firmware:*:*:*:*:*:*:*:* | before gca-y0 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c287:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c227_firmware:*:*:*:*:*:*:*:* | before gca-y0 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c227:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_287_firmware:*:*:*:*:*:*:*:* | before gca-y0 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_287:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_227_firmware:*:*:*:*:*:*:*:* | before gca-y0 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_227:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_368e_firmware:*:*:*:*:*:*:*:* | before gca-x8 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_368e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_308e_firmware:*:*:*:*:*:*:*:* | before gca-x8 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_308e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c368_firmware:*:*:*:*:*:*:*:* | before gca-x4 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c368:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c308_firmware:*:*:*:*:*:*:*:* | before gca-x4 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c308:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c258_firmware:*:*:*:*:*:*:*:* | before gca-x4 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c258:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_558_firmware:*:*:*:*:*:*:*:* | before gca-x4 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_558:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_458_firmware:*:*:*:*:*:*:*:* | before gca-x4 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_458:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_368_firmware:*:*:*:*:*:*:*:* | before gca-x4 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_368:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_308_firmware:*:*:*:*:*:*:*:* | before gca-x4 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_308:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c754e_firmware:*:*:*:*:*:*:*:* | before gdr-m0 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c754e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c654e_firmware:*:*:*:*:*:*:*:* | before gdr-m0 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c654e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_754e_firmware:*:*:*:*:*:*:*:* | before gdr-m0 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_754e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_654e_firmware:*:*:*:*:*:*:*:* | before gdr-m0 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_654e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c554e_firmware:*:*:*:*:*:*:*:* | before gdr-m1 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c554e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c454e_firmware:*:*:*:*:*:*:*:* | before gdr-m1 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c454e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c364e_firmware:*:*:*:*:*:*:*:* | before gdr-m1 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c364e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c284e_firmware:*:*:*:*:*:*:*:* | before gdr-m1 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c284e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c224e_firmware:*:*:*:*:*:*:*:* | before gdr-m1 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c224e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_554e_firmware:*:*:*:*:*:*:*:* | before gdr-m1 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_554e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_454e_firmware:*:*:*:*:*:*:*:* | before gdr-m1 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_454e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_364e_firmware:*:*:*:*:*:*:*:* | before gdr-m1 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_364e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_284e_firmware:*:*:*:*:*:*:*:* | before gdr-m1 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_284e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_224e_firmware:*:*:*:*:*:*:*:* | before gdr-m1 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_224e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c754_firmware:*:*:*:*:*:*:*:* | before gr4-m0 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c754:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c654_firmware:*:*:*:*:*:*:*:* | before gr4-m0 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c654:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c554_firmware:*:*:*:*:*:*:*:* | before gr4-m0 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c554:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c454_firmware:*:*:*:*:*:*:*:* | before gr4-m0 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c454:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c364_firmware:*:*:*:*:*:*:*:* | before gr4-m0 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c364:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c284_firmware:*:*:*:*:*:*:*:* | before gr4-m0 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c284:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c224_firmware:*:*:*:*:*:*:*:* | before gr4-m0 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c224:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_754_firmware:*:*:*:*:*:*:*:* | before gr4-m0 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_754:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_654_firmware:*:*:*:*:*:*:*:* | before gr4-m0 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_654:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c3851fs_firmware:*:*:*:*:*:*:*:* | before gca-x4 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c3851fs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c3851_firmware:*:*:*:*:*:*:*:* | before gca-x4 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c3851:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c3351_firmware:*:*:*:*:*:*:*:* | before gca-x4 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c3351:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_4752_firmware:*:*:*:*:*:*:*:* | before gca-x4 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_4752:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_4052_firmware:*:*:*:*:*:*:*:* | before gca-x4 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_4052:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
- cpe:2.3:o:konicaminolta:bizhub_958_firmware:*:*:*:*:*:*:*:* Versions before gca-y1 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_958:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_808_firmware:*:*:*:*:*:*:*:* Versions before gca-y1 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_808:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_758_firmware:*:*:*:*:*:*:*:* Versions before gca-y1 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_758:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_658e_firmware:*:*:*:*:*:*:*:* Versions before gca-y1 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_658e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_558e_firmware:*:*:*:*:*:*:*:* Versions before gca-y1 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_558e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_458e_firmware:*:*:*:*:*:*:*:* Versions before gca-y1 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_458e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c287_firmware:*:*:*:*:*:*:*:* Versions before gca-y0 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c287:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c227_firmware:*:*:*:*:*:*:*:* Versions before gca-y0 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c227:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_287_firmware:*:*:*:*:*:*:*:* Versions before gca-y0 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_287:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_227_firmware:*:*:*:*:*:*:*:* Versions before gca-y0 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_227:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_368e_firmware:*:*:*:*:*:*:*:* Versions before gca-x8 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_368e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_308e_firmware:*:*:*:*:*:*:*:* Versions before gca-x8 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_308e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c368_firmware:*:*:*:*:*:*:*:* Versions before gca-x4 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c368:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c308_firmware:*:*:*:*:*:*:*:* Versions before gca-x4 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c308:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c258_firmware:*:*:*:*:*:*:*:* Versions before gca-x4 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c258:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_558_firmware:*:*:*:*:*:*:*:* Versions before gca-x4 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_558:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_458_firmware:*:*:*:*:*:*:*:* Versions before gca-x4 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_458:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_368_firmware:*:*:*:*:*:*:*:* Versions before gca-x4 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_368:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_308_firmware:*:*:*:*:*:*:*:* Versions before gca-x4 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_308:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c754e_firmware:*:*:*:*:*:*:*:* Versions before gdr-m0 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c754e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c654e_firmware:*:*:*:*:*:*:*:* Versions before gdr-m0 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c654e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_754e_firmware:*:*:*:*:*:*:*:* Versions before gdr-m0 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_754e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_654e_firmware:*:*:*:*:*:*:*:* Versions before gdr-m0 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_654e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c554e_firmware:*:*:*:*:*:*:*:* Versions before gdr-m1 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c554e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c454e_firmware:*:*:*:*:*:*:*:* Versions before gdr-m1 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c454e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c364e_firmware:*:*:*:*:*:*:*:* Versions before gdr-m1 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c364e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c284e_firmware:*:*:*:*:*:*:*:* Versions before gdr-m1 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c284e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c224e_firmware:*:*:*:*:*:*:*:* Versions before gdr-m1 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c224e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_554e_firmware:*:*:*:*:*:*:*:* Versions before gdr-m1 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_554e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_454e_firmware:*:*:*:*:*:*:*:* Versions before gdr-m1 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_454e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_364e_firmware:*:*:*:*:*:*:*:* Versions before gdr-m1 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_364e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_284e_firmware:*:*:*:*:*:*:*:* Versions before gdr-m1 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_284e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_224e_firmware:*:*:*:*:*:*:*:* Versions before gdr-m1 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_224e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c754_firmware:*:*:*:*:*:*:*:* Versions before gr4-m0 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c754:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c654_firmware:*:*:*:*:*:*:*:* Versions before gr4-m0 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c654:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c554_firmware:*:*:*:*:*:*:*:* Versions before gr4-m0 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c554:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c454_firmware:*:*:*:*:*:*:*:* Versions before gr4-m0 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c454:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c364_firmware:*:*:*:*:*:*:*:* Versions before gr4-m0 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c364:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c284_firmware:*:*:*:*:*:*:*:* Versions before gr4-m0 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c284:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c224_firmware:*:*:*:*:*:*:*:* Versions before gr4-m0 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c224:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_754_firmware:*:*:*:*:*:*:*:* Versions before gr4-m0 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_754:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_654_firmware:*:*:*:*:*:*:*:* Versions before gr4-m0 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_654:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c3851fs_firmware:*:*:*:*:*:*:*:* Versions before gca-x4 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c3851fs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c3851_firmware:*:*:*:*:*:*:*:* Versions before gca-x4 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c3851:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c3351_firmware:*:*:*:*:*:*:*:* Versions before gca-x4 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c3351:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_4752_firmware:*:*:*:*:*:*:*:* Versions before gca-x4 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_4752:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_4052_firmware:*:*:*:*:*:*:*:* Versions before gca-x4 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_4052:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2021-20872
- 2026-10-03 Alias added: GHSA-8vf2-m489-q377
References
More Konica Minolta, Inc. Bizhub 224e Firmware vulnerabilities
- TI-2021-04085 Information disclosure in Konica Minolta, Inc. bizhub series CVSS 3.1MEDIUM 6.5
- TI-2021-04083 Information disclosure in Konica Minolta, Inc. bizhub series CVSS 3.1MEDIUM 6.5
- TI-2021-04084 Improper handling of exceptional conditions in Konica Minolta, Inc. bizhub series CVSS 3.1MEDIUM 4.6
- TI-2021-04082 Incorrect authorization in Konica Minolta, Inc. bizhub series CVSS 3.1MEDIUM 4.5
Sources
- CVE-2021-20872 · CVE Program
- CVE-2021-20872 · NVD
- FIRST EPSS
- GHSA-8vf2-m489-q377 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences